This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/SOEMdBmGOl9OdgU6wRKXH8ofpiw.roa File: SOEMdBmGOl9OdgU6wRKXH8ofpiw.roa (raw, json) Hash identifier: wRDPax/GBrg9//RtAKm4t39dVaYciZWJGLWscmkRs9k= Subject key identifier: 48:E1:0C:74:19:86:3A:5F:4E:76:05:3A:C1:12:97:1F:CA:1F:A6:2C Certificate issuer: /CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0 Certificate serial: 019B7758DDA1BF4EFDFEF0A75D7C04F2131B Authority key identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/SOEMdBmGOl9OdgU6wRKXH8ofpiw.roa Signing time: Thu 01 Jan 2026 02:17:51 +0000 ROA not before: Thu 01 Jan 2026 02:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199144 IP address blocks: 91.245.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:dd:a1:bf:4e:fd:fe:f0:a7:5d:7c:04:f2:13:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0 Validity Not Before: Jan 1 02:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48e10c7419863a5f4e76053ac112971fca1fa62c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:14:f9:0e:e9:e4:26:85:d0:ff:eb:c6:53:f8: 93:49:5e:49:9d:7f:f4:7b:5b:45:9f:93:24:f1:87: 51:0d:80:58:00:f1:e3:3c:38:97:92:20:fe:60:fa: 9d:11:29:11:4a:68:2c:f9:e8:7f:0d:16:24:1b:0e: b6:65:f6:0f:6f:c0:0b:83:9e:73:ec:c7:5b:29:9e: ab:78:a6:4b:9b:87:e4:cf:f9:e9:cd:00:97:a2:b2: fc:3f:10:b3:46:f0:d9:95:55:af:7c:19:73:d4:af: 7d:d9:d5:cf:14:7d:43:10:bb:cb:a2:01:f5:ff:f0: 0b:99:57:bb:49:08:cc:40:8d:77:ce:44:73:58:68: f5:e2:da:d5:0f:d3:91:bb:aa:27:49:12:94:92:4a: 5a:be:2b:ac:2b:e6:5c:c4:68:b8:13:37:60:cd:a5: 41:84:33:58:c0:b4:4b:b6:cd:96:fb:38:47:0b:3a: 29:5f:79:21:84:28:75:9b:f6:39:95:d8:94:53:da: 6f:30:5b:f2:bc:1b:34:cc:0b:8f:54:6e:b9:f8:54: 87:4f:09:b4:9d:be:a0:58:ba:51:09:3f:ba:9c:e7: 8f:d8:ac:98:9d:57:cd:68:f9:b2:80:2f:c1:c2:28: 3a:d5:0a:82:e2:96:14:27:af:04:a8:ea:ee:3b:b3: 28:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E1:0C:74:19:86:3A:5F:4E:76:05:3A:C1:12:97:1F:CA:1F:A6:2C X509v3 Authority Key Identifier: keyid:F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/SOEMdBmGOl9OdgU6wRKXH8ofpiw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.245.215.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:00:0f:b7:36:3c:51:25:a8:0b:ea:8c:ea:2e:e4:8c:f3:e5: 53:4d:76:e8:78:df:32:a0:9a:7c:4d:f3:3b:5d:88:f3:70:64: 36:45:e5:3c:8a:4f:66:c7:1f:6f:9b:fc:9b:ca:de:62:ae:f7: fb:d3:76:68:e4:e9:99:3b:25:86:83:78:d5:41:95:c5:4a:ac: b7:3e:12:46:9c:f0:f8:18:45:cf:59:0f:55:c9:d6:f2:27:c9: 08:57:e3:cf:b2:24:93:9a:25:23:3a:89:07:ce:fc:f2:5e:d3: 37:6a:57:fe:eb:ed:01:ee:1c:f8:c4:ce:f9:a4:f5:d7:49:c4: 04:06:db:b8:3e:44:c2:c2:bc:93:f3:38:22:27:4b:41:15:00: 5a:9d:ae:25:1a:f0:1f:5d:97:95:6f:75:8d:12:cb:35:a3:34: e6:70:97:ce:bd:a1:8a:7b:5e:ef:78:54:65:f7:de:62:4f:30: b3:3b:e9:cc:db:02:23:a6:d1:3e:67:75:a3:37:34:3f:3f:3b: 93:91:cd:fc:6b:be:1f:06:0f:23:56:de:39:9b:f4:dc:82:22: bc:3a:27:ac:49:34:f1:f7:76:10:35:77:8b:f0:f6:09:93:f3: 3d:cb:c1:5d:9a:53:11:41:74:01:17:e9:1d:2b:05:c7:2e:7f: c6:da:10:9d -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WN2hv079/vCnXXwE8hMbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTMxZDJlZWViNjdhOTM3ZTJlODdkNzZhZDlmOWQxN2Nk YTk3ZjAwHhcNMjYwMTAxMDIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGUxMGM3NDE5ODYzYTVmNGU3NjA1M2FjMTEyOTcxZmNhMWZhNjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRT5DunkJoXQ/+vGU/iTSV5JnX/0 e1tFn5Mk8YdRDYBYAPHjPDiXkiD+YPqdESkRSmgs+eh/DRYkGw62ZfYPb8ALg55z 7MdbKZ6reKZLm4fkz/npzQCXorL8PxCzRvDZlVWvfBlz1K992dXPFH1DELvLogH1 //ALmVe7SQjMQI13zkRzWGj14trVD9ORu6onSRKUkkpaviusK+ZcxGi4EzdgzaVB hDNYwLRLts2W+zhHCzopX3khhCh1m/Y5ldiUU9pvMFvyvBs0zAuPVG65+FSHTwm0 nb6gWLpRCT+6nOeP2KyYnVfNaPmygC/Bwig61QqC4pYUJ68EqOruO7MoRwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFEjhDHQZhjpfTnYFOsESlx/KH6YsMB8GA1UdIwQY MBaAFPijHS7utnqTfi6H12rZ+dF82pfwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LTWRMdTYyZXBOLUxvZlhhdG41MFh6YWxfQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvODg2NjQ2LWZmYWEtNDAwZS04ZGY2 LTU5NWYyMTAwMTY2Yi8xL1NPRU1kQm1HT2w5T2RnVTZ3UktYSDhvZnBpdy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvN2IvODg2NjQ2LWZmYWEtNDAwZS04ZGY2LTU5NWYyMTAwMTY2 Yi8xLzEtS01kTHU2MmVwTi1Mb2ZYYXRuNTBYemFsX0EuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABb9dcw DQYJKoZIhvcNAQELBQADggEBAHwAD7c2PFElqAvqjOou5Izz5VNNduh43zKgmnxN 8ztdiPNwZDZF5TyKT2bHH2+b/JvK3mKu9/vTdmjk6Zk7JYaDeNVBlcVKrLc+Ekac 8PgYRc9ZD1XJ1vInyQhX48+yJJOaJSM6iQfO/PJe0zdqV/7r7QHuHPjEzvmk9ddJ xAQG27g+RMLCvJPzOCInS0EVAFqdriUa8B9dl5VvdY0SyzWjNOZwl869oYp7Xu94 VGX33mJPMLM76czbAiOm0T5ndaM3ND8/O5ORzfxrvh8GDyNW3jmb9NyCIrw6J6xJ NPH3dhA1d4vw9gmT8z3LwV2aUxFBdAEX6R0rBccuf8baEJ0= -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:00 2026 by rpki-client